Cisco Application Delivery Networks

Cisco Wide Area Application Services (WAAS)

Cisco WAAS is a powerful application acceleration and WAN optimization solution that optimizes performance of any application or service across WANs. Cisco WAAS overcomes WAN performance limitations such as bandwidth, latency, loss, and application chatter to help ensure that remote users receive high-performance access to information over the WAN.

End-to-End Solutions for Application Performance, Availability and Security

Large Remote Offices

Cisco Application Control Engine (ACE) Family

Small and Medium Remote Offices

Cisco WAAS Network Module The Cisco WAAS technology can be integrated into Cisco Integrated Services Routers through the use of the Cisco WAAS Network Module.
to WAN Providers to WAN Providers Latency-Sensitive Flows to WAN Providers

Service Transparency
Cisco WAAS and Cisco ACE provide transparency to users, servers, and the network, thereby helping ensure compliance with network features such as quality of service (QoS), NetFlow, optimized routing, and firewall policies.
Src Mac AAA Dst Mac BBB Src IP 1.1.1.10 Dst IP 2.2.2.10 Src TCP 15131 Dst TCP 80 App Data
to WAN Providers to WAN Providers

Loss-Sensitive Flows to WAN Providers

Data Redundancy LZ Elimination Compression

to WAN Providers

Src Mac BBB Dst Mac AAA

Src IP 1.1.1.10 Dst IP 2.2.2.10

Src TCP 15131 Dst TCP 80

Optimized

Data Redundancy Elimination (DRE)

Cisco WAAS DRE helps eliminate the transmission of redundant data patterns across the WAN, greatly enhancing performance, saving bandwidth, and making more efficient use of network resources.

Cisco Integrated Services Routers Cisco Integrated Services Routers provide a platform for the nextgeneration branch office, supporting valueadded services such as integrated wireless, security, voice, video, and WAN optimization.

Cisco Performance Routing (PfR) Cisco PfR is a IOS Software technology that enhances application performance by intelligently choosing a best path that reduces the cost, distributes load among all possible WAN paths, and improves overall network performance.

Transport Flow Optimizations (TFO)

Cisco WAAS TFO provides TCP-compliant optimizations to overcome poor TCP behavior due to WAN conditions. Cisco WAAS TFO improves throughput and reliability for clients and servers in WAN environments.
to WAN Providers

Cisco WAAS Inline Interception

Cisco WAAS appliances can be deployed physically in-path for simplicity using the inline interception card. This card provides fail-to-wire and serial clustering capabilities. Disk Encryption Cisco WAAS devices can be configured with disk encryption (256-bit Advanced Encryption Standard [AES]) to help ensure that data is not accessible should the disk be physically compromised.

Optimized Enterprise Applications (Symmetric Acceleration) Cisco WAAS employs a combination of WAN optimization and application acceleration to improve performance when accessing enterprise applications over the WAN, including intranet portals and enterprise resource planning (ERP), customer relationship management (CRM), and database applications. The technology is also defined Symmetric Acceleration, since it relies on collaboration between a WAAS component in the branch office and a WAAS or ACE+WAAS component in the data center. Common Internet File System (CIFS) Acceleration Cisco WAAS accelerates the CIFS protocol to help ensure high-performance access to centralized file servers, thereby facilitating consolidation. Cisco IOS Netflow
Primary network accounting technology in the Industry Provides a detailed view of network behavior

to WAN Providers

to WAN Providers

to WAN Providers

to WAN Providers

to WAN Providers

to WAN Providers

Cisco Wide Area Application Services (WAAS) Family

to WAN Providers

to WAN Providers

Accelerated Server and Workstation Backup Cisco WAAS offers optimization to provide server and workstation backup over the WAN, allowing IT organizations to consolidate storage and data-protection infrastructure. E-mail Acceleration Cisco WAAS and Cisco ACE provide optimization, scalability and security to improve e-mail performance and increase high-availability for any TCP-based e-mail application. Cisco IOS IP Service-Level Agreements (SLAs) Cisco IOS IP SLAs help ensure performance by measuring important network metrics at strategic locations within the network.

Video Stream Splitting

Content Delivery Network

Automatic Discovery
Cisco WAAS devices automatically discover one another prior to employing optimization to a connection, thus mitigating the need for configuration of complex overlay networks or tunnels.

Branch Server Consolidation

Cisco WAAS enables migration of costly branch servers to the data center.

Cisco WAAS Appliance Cisco WAAS appliances can be integrated into the network through physical in-path or out-of-path deployment using Web Cache Communication Protocol Version 2 (WCCPv2; shown here), Policy-Based Routing (PBR), or the Cisco ACE Module or ACE appliance.

Cisco IOS NetFlow Cisco IOS NetFlow provides traffic accounting services to allow use-based network billing, network planning, and security.

Integrated Video Services Cisco Wide Area Application Engine (WAE) Appliances and network modules provide an integrated solution for delivering digital video to the edge of the network, including prepositioning, caching, and stream splitting.

Accelerated Software Distribution Cisco WAAS optimizes user access to software distribution servers through caching, prepositioning, protocol acceleration, and WAN optimization to provide a LAN-like experience, allowing IT organizations to centralize software distribution infrastructure in the data center. Cisco ACE helps ensure high-availability and scalability of the software distribution farms in the data center.

Cisco ACE Appliances and Cisco WAAS Appliances Cisco ACE appliances can be used in locations that have servers to provide application acceleration, security, and high-availability. Cisco ACE appliances can also be used to integrate Cisco WAAS devices into the network to provide WAN optimization and application acceleration in a complementary fashion.

Remote Workers
Cisco IOS QoS Cisco IOS Software provides comprehensive, end-to-end QoS capabilities, allowing configuration of the network to meet application and business requirements. Cisco ACE and WAAS transparency helps ensure full integration with Cisco IOS QoS while providing additional QoS services for applications.

CAMPUS NETWORK 1
Cisco WAAS Mobile Server Software Content Distribution Cisco ACE 4710 Appliance The Cisco ACE 4710 appliance is a powerful application delivery and optimization solution for todays data centers. It helps ensure business continuity by enhancing application availability, improves business productivity by accelerating applications, and lowers operating costs by minimizing data center power and cooling needs. The Cisco ACE 4710 appliance uses the full range of Cisco application switching technology, including Layer 4 load balancing and Layer 7 content switching, server offloading with Secure Sockets Layer (SSL), caching, and TCP processing. The Cisco ACE 4710 appliance offers the same integrated application security and virtualization capabilities as the Cisco ACE Module. Accelerated Web-Based Applications The Cisco ACE 4710 appliance provides asymmetric application acceleration using compression, FlashForward, delta encoding, and other techniques to reduce the volume of transferred data and improve response times to end users, thus providing a better overall end-user experience.

CAMPUS NETWORK 2

Legend
Application Networking Services (ANS)

Internet

Cisco ACE Module or 4710 Appliance

Cisco ACE Global Site Selector

to WAN Providers

to Internet

to Internet

to Internet

to WAN Providers

Cisco ACE XML Gateway

Cisco ACE XML Manager

On the road
VPN users accessing the corporate network via wireless access at an Internet hotspot.

Home Office
Teleworker accessing the corporate network with a Cisco VPN Router over IPsec VPN for voice and data. Applications are secure and optimized.

FC Video Servers Content Acquisition

to WAN Providers

WAN Provider 1 WAN Provider 2

to WAN Providers

FC E-mail Servers
Cisco Application Networking Manager (ANM) Cisco WAAS Appliance or Network Module

Cisco WAAS Mobile Cisco WAAS Mobile extends Cisco WAAS application acceleration benefits to mobile employees who travel outside the office. It consists of client software for end users and software deployed on servers near existing VPN concentrators. Cisco WAAS Mobile supports advanced data transfer compression, application-specific acceleration, and transport optimization, with a small footprint on the PC or laptop.

FC

REGIONAL DATA CENTER 1

Optimized Replication Replication over Fibre Channel over IP (FCIP) using the Cisco MDS 9000 Series Switches or native IP from the storage array is optimized by Cisco WAAS Software to improve throughput and help ensure that arrays are closely synchronized.

Software Distribution Servers

FC
Cisco WAAS Mobile Client Software Cisco WAAS Mobile Server Software

REGIONAL DATA CENTER 2

Extended Cisco Portfolio

LARGE CAMPUS NETWORK 1

DATA CENTER 1
to WAN Providers

LARGE CAMPUS NETWORK 2

to Internet to WAN Providers

Cisco ACE Application Control Engine Application Delivery Solution

The Cisco ACE product family helps ensure application availability, accelerate application performance, and protect applications while simultaneously reducing data center costs.

Maximized application availability

Helps ensure business continuity and the best service to end users by taking advantage of availability through highly scalable Layer 4 load balancing and Layer 7 content switching, and minimizes effects of application, device, or site failure.

Cisco ACE XML Gateway The Cisco ACE XML Gateway provides XML service processing offloading, security, access control, and transport mediation.
Web Services Protection and Acceleration

Optimized Enterprise Applications (Asymmetric Acceleration) Remote workers accessing Web-based Enterprise Applications enjoy a better user experience thanks to Asymmetric Acceleration on the ACE in the data center, which reduces the impact of latency, optimizes the use of browser cache, and offloads resource-intensive functions from the application servers

DATA CENTER 2
to WAN Providers

Management, Extensibility and Integration

to Internet to WAN Providers

Cisco Router

Cisco Integrated Service Router with Cisco IOS Firewall

Accelerated application performance

Accelerates performance of Web-based applications by using patented acceleration technologies; delivers highly efficient data compression to speed up application response times; and improves server performance by offloading SSL, TCP, and Extension Markup Language (XML) processing.

Comprehensive application security

Acts as a last line of server defense by providing protection against application threats and denial-of-service (DoS) attacks with features such as deep packet inspection, network and protocol security, and highly scalable access control capabilities; protects XML applications and Web services by providing a powerful XML firewall.

The Cisco ACE XML Gateway accelerates performance and maximizes the scalability and security of Web services. It offloads XML processing, reduces XML latency, and protects against XML-based threats.

Disaster Recovery and Load Distribution The Cisco ACE Global Site Selector in the primary and secondary Data-Centers receive client DNS requests and direct clients to the most appropriate location able to serve the specific application request. The ACE GSS monitors health and load of each location. The location is selected based on configurable policies, load, health and proximity, achieving both load distribution and fast convergence for disaster recovery. A secure communication between 2 or more GSSs (up to 8) allows them to create a cluster for ease of management, and share client information like global persistence information. Cisco Cisco ONS 15454 Platform The Cisco ONS 15454 platform provides metro dense wavelength-division multiplexing (DWDM) connectivity between data center locations. Cisco Network Analysis Module (NAM) Integrated network analysis and collection services within the Cisco Catalyst 6500 Series facilitate visibility and understanding of network and application performance. Cisco NAM can be coupled with Cisco Performance Visibility Manager (PVM) to provide end-to-end applicationresponse-time monitoring and analysis. Cisco MDS 9000 Series Switches The Cisco MDS 9000 Series Switches are a multiprotocol intelligent storage switch and director family that provides performance, scalability, density, and integrated storage services. Cisco VFrame Data Center (DC) The Cisco VFrame DC service orchestration solution enables the coordinated provisioning and reuse of physical and virtualized computing, storage, and network resources from shared pools, using the network to help ensure that applications are dynamically supported throughout the data center. The autoprovisioning capabilities of Cisco VFrame DC and the integration of Cisco VFrame DC with Cisco Application Networking Services (ANS) solutions and application-fluent products contribute to the availability of Cisco Application Delivery Networks (ADN).
V

Cisco ASA 5500 Series Series Adaptive Security Appliance Modular platform providing next-generation security and VPN services, including firewall, application security, VPN termination, content security, and intrusion prevention.

Cisco Application Networking Manager (ANM) Cisco ANM provides multi-device application management of large scale data center operations, including monitoring and service activation and suspension of Cisco ACE devices, Content Services Switches (CSS) and Content Switching Modules (CSM and CSM-S)

Cisco Catalyst Switch

Cisco Catalyst 4500 or Catalyst 6500 Modular Switch

NetQoS SuperAgent

Cisco ACE XML Manager The Cisco ACE XML Manager is a secure, Web-based application that serves as a centralized policy management system. It increases developer productivity and improves deployment flexibility through its rollback and versioning capabilities, simplifying policy definition and enforcement. The ACE XML Manager also provides visibility into application transactions.

Cisco Catalyst 6500 Series

Network Analysis Module

Cisco Catalyst 6500 Series Switches Multilayer, modular, intelligent switches provide performance, scalability, density, and integrated services.

Management and Performance Monitoring Systems

Cisco Catalyst 6500 Supervisor Engine 32 Programmable Intelligent Services Accelerator (PISA) The Cisco Catalyst 6500 Supervisor Engine 32 PISA is an intelligent services supervisor that provides deep packet inspection, application awareness, security, availability, and manageability services. Cisco Catalyst Supervisor Engine 32 PISA provides hardware acceleration of intelligent services such as Network-Based Application Recognition (NBAR) and Flexible Packet Matching (FPM) at multigigabit speeds.

Application Performance Monitoring Cisco Application Delivery Networks components include support for open protocols (such as SNMP, and XML over HTTPS) to communicate with management and monitoring systems, as well as embedded software (such as NetQoS, integrated in the WAAS components) to increase application visibility and performance monitoring. The ACE Module and Appliance provide an open XML API that allow customized management applications to provide configuration changes and retrieve real-time information.

Integrated or External Firewall, Application Firewall, or Security Gateway

Cisco ASA 5500

Cisco VPN

Cisco VFrame DC

Identity Management Systems

Cisco Catalyst 6500 Series Firewall Services Module (FWSM) Integrated firewall services within the Cisco Catalyst 6500 Series provide security within the data center.
Users Attached to Wiring Closet Switches

Backup Servers

Identity Management Cisco ACE Application Control Engine XML Gateways can be used to filter, monitor, transform, and audit transaction streams as they pass between Web service elements. The gateway is an effective location for integration with the existing Identity and Access Management (IAM) infrastructures that support single sign-on and federated identities. Identity validation, privacy, and integrity enforcement and data transformation and mediation can be optimized by applying appropriate techniques at the gateway. The capabilities of the Cisco ACE XML Gateway can be customized and expanded through Java extensions.

Cisco MDS 9000 Series Switch

Cisco MDS 9000 Series Director

Cisco ONS 15454 Series

Cisco ACE Global Site Selector (GSS) Cisco ACE GSS provides global, secure, and universal Domain Name System (DNS) resolution for application and data center high availability. Cisco ACE GSS collects load and availability information from devices across multiple data centers. Using this information, Cisco ACE GSS can detect failure or overload conditions and redirect traffic to the most available or least loaded device.

File Servers or NAS Devices

Users Attached to Wiring Closet Switches

Cisco VFrame DC

Application Servers

Other Icons

Multi/tier Application Servers (CRM, ERP, Portals)

DATA CENTER 1
FC FC FC FC

DATA CENTER 2
FC FC FC FC Web 2.0, SOA Applications

Application Monitoring and Server Offload The Cisco ACE Module and Appliance monitor the health of network, servers and multi-tier applications through standard and ad-hoc health monitoring mechanisms, including customizable TCL-based scripts. Functions such as SSL, compression, and XML processing (validation, transformation) can be offloaded, freeing up valuable server resources resulting in higher application performance.

Fibre Channel Disk Subsystem

Fibre Channel Tape Subsystem

WAAS Cisco ACE Module The Cisco ACE Module for the Cisco Catalyst 6500 Series Switches and Cisco 7600 Series Routers provides high-performance (4 to 16 Gbps) application and server scalability, application acceleration, security, and high availability through integrated Layer 4 to 7 services, including intelligent application switching, SSL offloading, and TCP connection reuse capabilities. It includes virtualization and role-based access control (RBAC) capabilities to consolidate data center hardware and streamline management.
Cisco ACE Scalability Improved Application Availability and Scalability

Application flows are routed to the Cisco Catalyst 6500 Series with an integrated Cisco ACE Module. Flows are processed and inspected by the Cisco ACE Module, which determines whether they need to be redirected to the Cisco WAAS appliance farm to terminate WAN optimization. The Cisco ACE Module selects the best Cisco WAAS appliance, which terminates the WAN optimization and returns the flow to the Cisco ACE Module.

Server

Laptop or Workstation

The Cisco ACE application switch delivers high performance and intelligent application switching by using dynamic and adaptive load balancing algorithms. It provides server load balancing for all IP applications and persistence of information unique in the header or payload for packaged, custom, and XML applications. It is designed to deliver high stateful availability at the physical and virtual device levels.
Device and Data Center Consolidation

2 ACE

For More Information and Support

Cisco Application Networking Services (ANS)

Up to four active Cisco ACE Modules can be deployed within the same Cisco Catalyst 6500 Series switch, providing linear performance and scalability up to 64 Gbps.
Data Center and Applications Protection

The Cisco ACE application switch reduces the number of physical devices in the data center through its unique virtualization capability. Cisco ACE virtualization allows customers to partition a physical device into multiple virtual devices, each with all the capabilities of a physical device and isolated from each other.

AXG

More information at http://www.cisco.com/go/ans

Cisco Data Center Assurance Program (DCAP)

DWDM Ring Optical Fiber

The Cisco ACE Module identifies flows that require XML processing and selects the best Cisco ACE XML Gateway in the farm. The ACE XML Gateway provides XML inspection, optimization, and translation. The Cisco ACE Module selects the best application server based on the configured policies, server load, and load-balancing algorithm. At the same time, the Cisco ACE can provide additional application-specific security and acceleration functions, as well as server offloading, to reduce server CPU utilization while preserving the client source IP address for complete transparency.

Tested and validated Cisco ANS solutions at http://www.cisco.com/go/dcap

Cisco Advanced Services For Application Delivery
Wireless Connection

The Cisco ACE application switch secures the data center and applications, including Web and XML applications, from a wide variety of network and application attacks, known and unknown. It provides this protection through highly scalable packet and content filtering, protocol inspection, advanced encryption, DoS and SYN flood protection, and deep packet inspection.

Cisco Services for Application Networking Services (ANS) address all aspects of planning, deploying, operating, and optimizing ANS investments.
WAN Connection

Application Servers